TimeThreadLineFunctionMessage
19:07:57.12026E0365ftw1Loading (pid: 19684)
19:07:57.12129FC147ProcessHardwareRecorder::CommandThreadstarting recorder thread
19:07:57.12226E048Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0X91B70000>6|2|1247871722
19:07:57.12226E048Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0X94580000>6|2|1247871722
19:07:57.21626E0172DXManager::DetectFound in 0
19:07:57.21626E0209Initialize::GetLocation@ 0X4F80|20352
19:07:57.21626E0209Initialize::GetLocation@ 0X69700|431872
19:07:57.21626E0209Initialize::GetLocation@ 0X206F0|132848
19:07:57.21626E0209Initialize::GetLocation@ 0X1DE0|7648
19:07:57.21626E0111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X91B70000 <> 0X94580000
19:07:57.21626E0209Initialize::GetLocation@ 0XFD718860|-42891168
19:07:57.21626E0111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X91B70000 <> 0X94580000
19:07:57.21626E0209Initialize::GetLocation@ 0XFD71DC30|-42869712
19:07:57.21626E0111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X91B70000 <> 0X94580000
19:07:57.21626E0209Initialize::GetLocation@ 0XFD71C5F0|-42875408
19:07:57.21626E0111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X91B70000 <> 0X94580000
19:07:57.21626E0209Initialize::GetLocation@ 0XFD5FA7F0|-44062736
19:07:57.22926E048Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X87840000>6|2|1247871638
19:07:57.31026E0129DXManager::DetectOK
19:07:57.34326E0186DXManager::DetectDone
19:07:57.34326E0215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
19:07:57.34326E0209Initialize::GetLocation@ 0X41B90|269200
19:07:57.34326E0209Initialize::GetLocation@ 0X33E20|212512
19:07:57.34326E0209Initialize::GetLocation@ 0X3D6C0|251584
19:07:57.34326E0209Initialize::GetLocation@ 0XB8E10|757264
19:07:57.34326E0209Initialize::GetLocation@ 0XB8960|756064
19:07:57.34326E0209Initialize::GetLocation@ 0XACF0|44272
19:07:57.34326E0209Initialize::GetLocation@ 0XB8A00|756224
19:07:57.34326E0209Initialize::GetLocation@ 0X1B6B0|112304
19:07:57.34326E0209Initialize::GetLocation@ 0X1E100|123136
19:07:57.34326E0209Initialize::GetLocation@ 0X26730|157488
19:07:57.34326E0209Initialize::GetLocation@ 0X1146B0|1132208
19:07:57.34326E0209Initialize::GetLocation@ 0X114170|1130864
19:07:57.34326E0209Initialize::GetLocation@ 0X1B5A0|112032
19:07:57.34326E0209Initialize::GetLocation@ 0X1B4B0|111792
19:07:57.34326E0209Initialize::GetLocation@ 0XD680|54912
19:07:57.34326E0209Initialize::GetLocation@ 0X493C0|299968
19:07:57.34326E0209Initialize::GetLocation@ 0XA860|43104
19:07:57.34326E0209Initialize::GetLocation@ 0XD0000|851968
19:07:57.34326E0209Initialize::GetLocation@ 0XD06D0|853712
19:07:57.34326E0209Initialize::GetLocation@ 0XA860|43104
19:07:57.34326E0209Initialize::GetLocation@ 0XD11C0|856512
19:07:57.34326E0209Initialize::GetLocation@ 0XD1820|858144
19:07:57.35326E048Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0X78AD0000>6|2|1247870977
19:07:57.36626E083VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
19:07:57.36626E0209Initialize::GetLocation@ 0X4040|16448
19:07:57.36626E0209Initialize::GetLocation@ 0X6410|25616
19:07:57.36626E0209Initialize::GetLocation@ 0X65C0|26048
19:07:57.36726E048Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X702D0000>6|2|1247870977
19:07:57.37726E093VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
19:07:57.37726E0110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
19:07:57.37726E0209Initialize::GetLocation@ 0XA5D0|42448
19:07:57.37726E0209Initialize::GetLocation@ 0XD4D0|54480
19:07:57.37726E0209Initialize::GetLocation@ 0XD290|53904
19:07:57.44426E0225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_84_12_19684 opened succesfuly
19:07:57.44426E072HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
19:07:57.44426E0256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_84_12_19684 close 2147483647 bytes
19:07:57.44426E0301InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.166.1.16\OWExplorer.dll]
19:07:57.47726E0389ftw1OWExplorer injected
19:07:57.4784E470Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnectedconnected to process tracker server
19:07:57.629146051`anonymous-namespace'::CreateProviderInitialize provider: NET
19:07:57.6291460117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
19:07:57.629146054`anonymous-namespace'::CreateProviderFail to initlized provider: NET
19:07:57.629146051`anonymous-namespace'::CreateProviderInitialize provider: GPU
19:07:57.69649E0726ProcessInjector::InjectProcessprocess |remoting_host.exe| missing h
19:07:57.69649E0726ProcessInjector::InjectProcessprocess |VpnSvc.exe| missing h
19:07:57.75949E0726ProcessInjector::InjectProcessprocess |GoogleCrashHandler.exe| missing h
19:07:57.75949E0726ProcessInjector::InjectProcessprocess |GoogleCrashHandler64.exe| missing h
19:07:57.82249E0726ProcessInjector::InjectProcessprocess |LMS.exe| missing h
19:10:27.74449E0481ProcessInjector::HandleElevatedProcessFail injection to process [2416] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
19:10:27.74449E0413ProcessInjector::HandlePendingProccesssFail to inject pending process |2416|: NVDisplay.Container.exe
19:10:27.74449E0481ProcessInjector::HandleElevatedProcessFail injection to process [3832] [t: 0 w_t_id: 0]- remoting_host.exe (elevated True) 0x0
19:10:27.74449E0413ProcessInjector::HandlePendingProccesssFail to inject pending process |3832|: remoting_host.exe
19:10:27.74449E0481ProcessInjector::HandleElevatedProcessFail injection to process [4008] [t: 0 w_t_id: 0]- VpnSvc.exe (elevated True) 0x0
19:10:27.74449E0413ProcessInjector::HandlePendingProccesssFail to inject pending process |4008|: VpnSvc.exe
19:10:27.74449E0481ProcessInjector::HandleElevatedProcessFail injection to process [4044] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
19:10:27.74449E0413ProcessInjector::HandlePendingProccesssFail to inject pending process |4044|: nvcontainer.exe
19:10:27.74449E0481ProcessInjector::HandleElevatedProcessFail injection to process [4144] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
19:10:27.74449E0413ProcessInjector::HandlePendingProccesssFail to inject pending process |4144|: MsMpEng.exe
19:10:28.75649E0481ProcessInjector::HandleElevatedProcessFail injection to process [5060] [t: 0 w_t_id: 0]- LMS.exe (elevated True) 0x0
19:10:28.75649E0413ProcessInjector::HandlePendingProccesssFail to inject pending process |5060|: LMS.exe
19:10:28.75649E0481ProcessInjector::HandleElevatedProcessFail injection to process [10156] [t: 0 w_t_id: 0]- GoogleCrashHandler.exe (elevated True) 0x0
19:10:28.75649E0413ProcessInjector::HandlePendingProccesssFail to inject pending process |10156|: GoogleCrashHandler.exe
19:10:28.75649E0481ProcessInjector::HandleElevatedProcessFail injection to process [10324] [t: 0 w_t_id: 0]- GoogleCrashHandler64.exe (elevated True) 0x0
19:10:28.75649E0413ProcessInjector::HandlePendingProccesssFail to inject pending process |10324|: GoogleCrashHandler64.exe
19:12:40.97349E0726ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
20:18:35.614E475Common::ProcessExplorer::ProcessTrackerIPCAgent::OnDisconnecteddisconnected to process tracker server
20:18:35.33726E066ProcessesMonitor::Stopstopping PM...
20:18:35.3371460119ProcessesMonitor::ProcessEnumerateThreadexit process listener
20:18:41.35426E066ProcessesMonitor::Stopstopping PM...